zeertzjq c3c06723f0 vim-patch:9.2.0355: runtime(tar): missing path traversal checks in tar#Extract() (#39095) ...

Problem:  runtime(tar): missing path traversal checks in tar#Extract()
Solution: Add check for leading slash, however gnu tar should already
          detect this (q1uf3ng)

tar#Extract() did not check for ../ sequences or absolute paths,
unlike zip#Extract() which was patched in recent commits. Add the
same checks: ../ (relative traversal), leading slash (Unix), drive
letter and UNC/leading slash (Windows).

closes: vim/vim#19981

490b737f3e

Co-authored-by: q1uf3ng <q1uf3ng@protone.me>

2026-04-16 08:40:41 +08:00

..

autoload

vim-patch:9.2.0355: runtime(tar): missing path traversal checks in tar#Extract() (#39095)

2026-04-16 08:40:41 +08:00

colors

vim-patch:c99aaf4: runtime(colors): improve catppuccin colorscheme

2026-02-01 08:22:07 +08:00

compiler

vim-patch:9.2.0225: runtime(compiler): No compiler plugin for just (#38424)

2026-03-22 23:14:49 +00:00

doc

refactor(api): rename "window" to "win" (positional parameters) #39083

2026-04-15 13:31:17 -04:00

ftplugin

vim-patch:72cefe6: runtime(help): support highlighting groups in translated syntax doc (#38922)

2026-04-10 08:23:48 +08:00

indent

vim-patch:99ea2b5: runtime(handlebars): adds handlebars template syntax & indent support

2026-03-06 07:59:15 +08:00

keymap

vim-patch:5c855ce: runtime: convert *_utf-8.vim files to actual UTF-8 encoding

2026-01-26 06:53:53 +08:00

lua

fix(lsp): set 'winfixbuf' in open_floating_preview() window #39058

2026-04-15 17:14:35 -04:00

pack/dist/opt

fix(difftool): ensure standardized locale for diff output parsing #38853

2026-04-07 13:02:11 -04:00

plugin

fix(net): handle remote archive URLs via tar/zip browse #38744

2026-04-05 15:22:26 -04:00

queries

build(deps): bump tree-sitter-lua to v0.5.0

2026-02-26 19:26:35 +01:00

scripts

feat(lua): replace buffer with buf in vim.keymap.set/del #38360

2026-03-21 12:00:06 -04:00

spell

feat(runtime): import cleanadd.vim from Vim (#17699)

2022-03-13 04:52:45 +00:00

syntax

vim-patch:86dcb18: Revert "runtime(jjdescription): allow to configure summary width" (#39011)

2026-04-13 22:26:56 +08:00

tutor

docs: misc (#37280)

2026-01-07 08:11:42 +08:00

CMakeLists.txt

feat(build): rename io.neovim.nvim to org.neovim.nvim

2026-04-14 11:13:03 -05:00

delmenu.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

embedded_data.zig

build: ship "_core/*" as bytecode (built-into Nvim binary)

2025-12-30 01:44:24 -05:00

example_init.lua

docs: api, plugins, ui2

2026-03-24 00:14:55 +01:00

filetype.lua

docs: use "ev" convention in event-handlers

2026-03-12 11:12:56 +01:00

ftoff.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

ftplugin.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

ftplugof.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

gen_runtime.zig

fix(build): workaround errors in zig build due to stale cache

2025-08-22 19:10:43 +02:00

indent.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

indoff.vim

vim-patch:e978b4534a5e (#24697)

2023-08-13 13:25:10 +01:00

makemenu.vim

vim-patch:9.1.1647: filetype: Cangjie files are not recognized

2025-08-20 07:23:49 +08:00

menu.vim

vim-patch:d5f173c: runtime(menu): fix space before Tab and trailing space

2026-01-20 07:56:50 +08:00

neovim.ico

feat(windows): show icon in terminal titlebar, taskbar #20607

2022-10-13 05:48:12 -07:00

nvim.png

…

org.neovim.nvim.appdata.xml

feat(build): rename io.neovim.nvim to org.neovim.nvim

2026-04-14 11:13:03 -05:00

org.neovim.nvim.desktop

feat(build): rename io.neovim.nvim to org.neovim.nvim

2026-04-14 11:13:03 -05:00

synmenu.vim

vim-patch:9.1.1647: filetype: Cangjie files are not recognized

2025-08-20 07:23:49 +08:00

windows_icon.rc

feat(win32): embed executable icon

2024-07-02 13:05:16 +02:00